Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          hBqV1bzr86p8bTyw1ba9TD3/sxXyo8zWwqmNpG3Fc9Y=
Subject key identifier:   E8:A5:96:61:86:89:47:34:65:DD:46:B7:BE:9D:A1:BD:F7:B8:2C:BB
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       019D26CD14905368AAC707B939A00080DAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 21:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:07 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: 3ZPXXr656BNwIdr0NAcSu1BUUd0qzpbyPykgKMPlKI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:14:90:53:68:aa:c7:07:b9:39:a0:00:80:da:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: Mar 25 21:01:07 2026 GMT
            Not After : Mar 26 21:01:07 2026 GMT
        Subject: CN=e8a596618689473465dd46b7be9da1bdf7b82cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:20:de:ae:c6:a4:95:2f:ec:5a:09:f4:aa:
                    43:47:e1:96:11:ba:a2:9a:0e:a6:77:24:a2:4d:04:
                    b7:f4:2b:ba:fe:b5:72:6f:6a:fb:24:c7:bd:8a:12:
                    b6:1a:41:53:bb:d2:0f:53:48:9e:0e:23:20:17:f2:
                    e3:70:c5:2e:00:2e:25:e9:1d:68:bf:24:f8:ab:a4:
                    80:70:07:40:72:8e:53:31:16:1a:be:53:ca:0d:df:
                    f8:34:6b:ca:73:f4:d5:8d:a5:b1:ad:bf:e8:33:29:
                    35:8d:08:f1:d3:a1:18:d7:73:75:cd:b9:eb:b0:45:
                    9e:4d:63:6b:fd:66:30:9d:a3:ed:65:8f:0f:60:a8:
                    6b:09:5b:a0:7d:63:14:fe:70:06:35:0c:11:4f:b1:
                    03:cd:3b:5e:21:b3:21:cc:56:b0:c0:21:09:16:a6:
                    0b:dd:a8:12:61:e6:59:9c:10:cf:ba:8e:60:35:c1:
                    3d:be:1a:72:ec:99:05:e6:6e:fd:7c:56:18:34:b5:
                    dc:3e:2a:10:56:29:8f:2c:9e:b0:58:de:2b:d2:e9:
                    cc:3b:fa:d0:3d:11:7b:eb:27:19:25:13:79:e2:ee:
                    cb:45:92:34:61:49:e2:9c:1b:0f:a1:3a:75:29:79:
                    39:3a:dc:db:f7:24:6f:2d:e3:6e:06:3e:6e:bf:16:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A5:96:61:86:89:47:34:65:DD:46:B7:BE:9D:A1:BD:F7:B8:2C:BB
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:dc:c0:33:95:af:55:b1:41:0e:09:51:dd:8d:26:7a:b6:
         82:80:41:e7:3b:72:21:5c:d2:c3:22:87:46:89:26:3e:8c:48:
         03:e5:9b:fa:ba:0f:71:7c:be:69:81:21:5f:14:61:b5:9a:3c:
         d3:8e:e1:f4:73:55:bd:a5:4b:fe:4a:3d:5e:0d:27:92:e5:d9:
         5c:57:86:52:ca:66:de:84:71:4f:c0:19:f2:15:6c:ef:e2:a2:
         aa:a2:92:4f:b1:42:00:39:ec:01:5e:75:05:26:9f:e3:b6:02:
         03:39:ba:ce:55:f2:9e:29:87:df:17:44:33:4b:5a:ef:b4:23:
         a7:25:55:45:33:7b:10:3c:bb:14:d5:0c:e0:4c:5f:ca:45:b6:
         ab:05:d3:6b:7c:14:b4:b0:1e:e7:40:6d:0b:78:82:0f:4b:ca:
         d7:3b:7b:ac:9d:13:1f:f2:87:0d:cc:e9:ad:de:51:41:b2:3c:
         b5:ef:3f:97:6f:20:0d:1f:8f:d7:4f:49:96:be:b8:36:01:c9:
         2c:50:c0:88:d0:5d:d3:aa:99:c0:b7:1b:3f:12:9a:95:fc:95:
         92:2f:b4:be:0a:85:06:62:d4:08:08:71:f3:9e:78:72:46:53:
         fb:ea:6d:ba:47:9e:79:fa:8e:16:20:a7:de:fd:82:3b:7a:61:
         37:05:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----